Principal, GRC Cyber Risk Management

Northern Trust
Arizona
Workplace: OnsiteFull timeUSD 108,965 - 185,155Function: CybersecurityExperience: 10+ yearsEducation: bachelorsSkills: ["Communication","Presentation","Analytical thinking","Problem-solving","Decision-making"]

Lead enterprise cyber risk identification, assessment, prioritization, and executive risk reporting within Northern Trust’s Cybersecurity Governance, Risk and Compliance organization. Drive modernization by integrating threat intelligence, attack surface insights, vulnerability trends, and control effectiveness into data-driven decision-making. Conduct assessments aligned to NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001, and translate technical risks into clear business impact narratives for leadership, risk committees, and regulators.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Northern Trust
Northern Trust
1 month ago

Principal, GRC Cyber Risk Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Lead enterprise cyber risk identification, assessment, prioritization, and executive risk reporting within Northern Trust’s Cybersecurity Governance, Risk and Compliance organization. Drive modernization by integrating threat intelligence, attack surface insights, vulnerability trends, and control effectiveness into data-driven decision-making. Conduct assessments aligned to NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001, and translate technical risks into clear business impact narratives for leadership, risk committees, and regulators.
Location: Arizona
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead identification, assessment, prioritization, and reporting of cyber risks across the enterprise.
  • •Evolve cyber risk management with data-driven decision-making by integrating cyber threat intelligence, attack surface insights, vulnerability trends, and control effectiveness into reporting.
  • •Conduct cyber risk assessments, thematic reviews, and cyber maturity assessments aligned to industry frameworks and regulatory expectations.
  • •Develop forward-looking cyber risk reporting with actionable insights for executive leadership, risk committees, and regulators.
  • •Enhance cyber risk intelligence capabilities using analytics, automation, and AI-enabled processes, and translate technical risks into business impact narratives and strategic recommendations.

Pay and Benefits

Salary: USD 108,965 - 185,155
Equity and Bonus:Equity
Perks:401kPensionHealth InsuranceDentalVisionPaid LeaveParental LeaveLife InsuranceDisability InsuranceSpending Accounts

Key Requirements

  • •Bachelor’s degree in Information Security, Computer Science, or related field; Master’s preferred.
  • •10+ years of cybersecurity experience focused on risk management.
  • •Deep knowledge of cyber risk management frameworks and methodologies including NIST CSF, FAIR, MITRE ATT&CK, CRI, and ISO 27001.
  • •Experience leveraging AI, analytics, automation, or data engineering to improve cyber risk management processes.
  • •Relevant certifications such as CISSP, CISM, CRISC, or similar.
Experience:10+ yearsCybersecurityRisk managementEnterprise risk managementFinancial servicesCyber threat intelligence
Education:Bachelor's in Information Security, Computer Science, or related field
Skills:CommunicationPresentationAnalytical thinkingProblem-solvingDecision-making
Certifications:CISSPCISMCRISC
Tech Stack:Cyber threat intelligenceAttack surface insightsVulnerability trendsControl effectiveness metricsData-driven decision makingAnalyticsAutomationArtificial intelligenceData engineeringNIST CSFFAIRMITRE ATT&CKCRIISO 27001KRIsKCIsPredictive cyber risk analytics

Eligibility

Visa:H-1BL-1TNO-1E-3H-1B1F-1J-1OPTCPT
Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Northern Trust
Global financial services firm providing wealth management, asset servicing, asset management, and banking solutions to institutions, corporations, and affluent individuals, with a focus on custody, investment management, and technology-driven services.
Industry: Asset Management
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Chicago, United States
Founded: 1889
Glassdoor
Glassdoor: 3.9
WebsiteLinkedIn